77 matches found
CVE-2020-4159
IBM QRadar Network Security 5.4.0 and 5.5.0 discloses sensitive information to unauthorized users which could be used to mount further attacks against the system. IBM X-Force ID: 174339...
IBM QRadar Network Security 信任管理问题漏洞
IBM QRadar Network Security is a network security manager from IBM, USA. used to provide better visibility and control over activities and users on the network, while using deep packet inspection, heuristics and behavior-based analysis to detect and prevent advanced threats.IBM QRadar Network...
DEBIAN-CVE-2022-31117
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is...
UBUNTU-CVE-2022-31117
UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a buffer for string decoding can cause the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is...
UltraJSON 安全漏洞
UltraJSON is an open source, ultra-fast JSON encoder and decoder written in pure C and bundled with Python 3.7+. A security vulnerability exists in versions of UltraJSON prior to 5.4.0, which stems from an inability to properly decode certain characters, allowing for potential key obfuscation and...
UltraJSON 资源管理错误漏洞
UltraJSON is an open source, ultra-fast JSON encoder and decoder written in pure C and bundled with Python 3.7+. A resource management error vulnerability exists in versions of UltraJSON prior to 5.4.0, which stems from an error when reallocating a buffer for string decoding, which could cause th...
CVE-2021-34412
During the installation process for all versions of the Zoom Client for Meetings for Windows before 5.4.0, it is possible to launch Internet Explorer. If the installer was launched with elevated privileges such as by SCCM this can result in a local privilege escalation...
Fhg Fokus Kamailio Environmental Issues Vulnerabilities
Fhg Fokus Kamailio is an open source Sip server from the Fhg Fokus Institute in Germany. The server mainly supports IP telephony services. A security vulnerability exists in Kamailio versions prior to 5.4.0, which stems from a vulnerability that allows bypassing the header removal protection...
Lua Code Problems Vulnerabilities
Lua is a lightweight, extensible open source scripting language from the Lua team. A code issue vulnerability exists in the ldebug.c file in Lua version 5.4.0. The vulnerability stems from an improperly designed or implemented code development process for a networked system or product. No detaile...
Lua Buffer Overflow Vulnerability
Lua is a lightweight, extensible open source scripting language from the Lua team. A buffer overflow vulnerability exists in luaOpushvfstring in Lua 5.4.0 and earlier versions, which originates when a networked system or product performs an operation in memory without properly validating the data...
PT-2020-6263 · Lua +7 · Lua +7
Name of the Vulnerable Software and Affected Versions: Lua version 5.4.0 Description: The issue is related to an integer overflow in the ldebug.c component of the Lua script interpreter. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is demonstrated by...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-36214)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.4.0. An attacker could exploit the vulnerability to compromise confidentiality...
Unspecified Vulnerability in Mattermost Server (CNVD-2020-36213)
Mattermost Server is the United States Mattermost company's set of open source messaging platform. A security vulnerability exists in Mattermost Server versions prior to 5.4.0. An attacker could exploit the vulnerability to compromise confidentiality...
CVE-2018-12412
The realm server tibrealmserver component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery CSRF attacks. Affected releases are TIBCO...
Adrenalin HRMS Cross-Site Scripting Vulnerability
Adrenalin HRMS is a human resource management system from Adrenalin eSystems, India. A cross-site scripting vulnerability exists in the ApplicationtEmployeeSearch page in Adrenalin HRMS version 5.4.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the...